Description
The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvparam.chl, and (5) advanced.chl.
References
- 5548 vdb-entry
- abyss-admin-console-access(9957) vdb-entry
- http://www.aprelium.com/news/patch1033.html
- 20020822 Abyss 1.0.3 directory traversal and administration bugs mailing-list